about summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorSandro <sandro.jaeckel@gmail.com>2021-09-21 22:10:10 +0200
committerGitHub <noreply@github.com>2021-09-21 22:10:10 +0200
commitbfc38d3d0d22c528e8abc46c5dd5f3f50fc4554b (patch)
tree1a690b95dc6e6cb3bafd99fd8fcdf018c7db4e8f /nixos
parent498490221fedd9916496472211009eabe4bfef7b (diff)
parent22e52be3b35cb48d90ec76b6accdc243ee7c9714 (diff)
downloadnixlib-bfc38d3d0d22c528e8abc46c5dd5f3f50fc4554b.tar
nixlib-bfc38d3d0d22c528e8abc46c5dd5f3f50fc4554b.tar.gz
nixlib-bfc38d3d0d22c528e8abc46c5dd5f3f50fc4554b.tar.bz2
nixlib-bfc38d3d0d22c528e8abc46c5dd5f3f50fc4554b.tar.lz
nixlib-bfc38d3d0d22c528e8abc46c5dd5f3f50fc4554b.tar.xz
nixlib-bfc38d3d0d22c528e8abc46c5dd5f3f50fc4554b.tar.zst
nixlib-bfc38d3d0d22c528e8abc46c5dd5f3f50fc4554b.zip
Merge pull request #125966 from ju1m/apparmor
Diffstat (limited to 'nixos')
-rw-r--r--nixos/modules/config/malloc.nix5
1 files changed, 4 insertions, 1 deletions
diff --git a/nixos/modules/config/malloc.nix b/nixos/modules/config/malloc.nix
index f2e28a167ef2..84da5643004f 100644
--- a/nixos/modules/config/malloc.nix
+++ b/nixos/modules/config/malloc.nix
@@ -100,7 +100,10 @@ in
       "abstractions/base" = ''
         r /etc/ld-nix.so.preload,
         r ${config.environment.etc."ld-nix.so.preload".source},
-        mr ${providerLibPath},
+        include "${pkgs.apparmorRulesFromClosure {
+            name = "mallocLib";
+            baseRules = ["mr $path/lib/**.so*"];
+          } [ mallocLib ] }"
       '';
     };
   };